// Alert

Microsoft 365 threat report

Nikkei Inc. disclosed on October 5, 2026 that threat actors compromised two email accounts: a Microsoft 365 account used to send approximately 9,000 phishing emails to internal and external contacts on September 30, and a Google Workspace account accessed since late July exposing names and email addresses of 1,646 employees and business partners. No specific threat actor has been attributed, and no malware or advanced persistence was identified. Remediation included password resets and regulatory notification to Japan's Personal Information Protection Commission.

// Get alerts for Microsoft 365